Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/gVvoQC5WLC_irZeVLNyYcK9Hyy4.roa
File: gVvoQC5WLC_irZeVLNyYcK9Hyy4.roa (raw, json)
Hash identifier: L2JvAwIemBTM0EMeQ48+bq59AHbI1bQ47BUq0nUpm24=
Subject key identifier: 81:5B:E8:40:2E:56:2C:2F:E2:AD:97:95:2C:DC:98:70:AF:47:CB:2E
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 019427B63623542F214788685CC1BF1204D6
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/gVvoQC5WLC_irZeVLNyYcK9Hyy4.roa
Signing time: Thu 02 Jan 2025 15:50:40 +0000
ROA not before: Thu 02 Jan 2025 15:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 185.113.11.0/24 maxlen: 24
194.32.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:36:23:54:2f:21:47:88:68:5c:c1:bf:12:04:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 2 15:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=815be8402e562c2fe2ad97952cdc9870af47cb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:44:b2:ef:53:a3:40:09:62:ec:88:1b:9b:
f1:46:38:f5:57:60:a2:d1:14:0a:04:ea:21:72:47:
63:57:8a:56:b1:2a:92:aa:4d:89:be:2a:41:ed:1b:
c3:c3:4b:fc:df:45:a3:23:9c:bc:99:97:15:e3:65:
a8:c7:39:e7:1c:3c:3e:77:80:07:0b:10:1e:1c:0e:
25:cc:50:59:39:c0:a9:90:3f:6b:3b:9d:b8:46:94:
da:67:91:b6:ef:83:c4:9c:14:6a:08:3c:d9:59:fa:
66:70:d5:14:b0:63:66:83:f6:fc:c8:36:aa:96:14:
28:58:a8:40:2d:d0:95:f7:96:01:42:38:f3:01:3b:
36:80:cf:46:77:8d:a5:c6:04:dd:17:fb:c1:19:13:
e2:03:97:e8:17:87:b3:72:70:1b:c2:0f:51:69:3f:
c4:37:ba:ff:05:01:fe:a8:97:f5:ad:44:22:2f:95:
39:65:8b:e8:71:05:ee:03:5a:89:a2:8a:cf:33:cc:
f0:85:62:3d:35:52:bf:6b:4f:d2:a6:f4:4b:5b:62:
9a:10:6d:35:01:85:02:ac:f8:57:7d:b7:e1:61:27:
3a:e7:8d:fa:fb:f3:be:3f:78:ee:99:c6:db:c4:98:
ef:f9:c8:c9:28:5a:01:ee:4a:e5:8e:96:91:73:72:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:E8:40:2E:56:2C:2F:E2:AD:97:95:2C:DC:98:70:AF:47:CB:2E
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/gVvoQC5WLC_irZeVLNyYcK9Hyy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.11.0/24
194.32.147.0/24
Signature Algorithm: sha256WithRSAEncryption
05:82:40:9b:21:57:de:75:44:4e:cb:15:69:3f:da:a6:53:2b:
c5:80:de:f8:de:33:8e:ea:cf:d6:cf:70:91:37:5a:89:a9:cc:
ed:48:5f:d7:89:89:0e:6b:fb:35:27:1f:09:02:3f:a8:4e:3d:
d4:ee:8d:14:2d:a7:a6:01:3d:d9:ab:dd:ec:0e:9f:cc:fd:7d:
83:7c:73:46:03:58:80:f6:37:01:f5:8e:5c:31:c0:8f:41:dd:
27:8c:a5:84:f1:67:fc:10:4c:85:7f:29:a7:ef:a8:ac:e8:87:
2d:fb:de:75:ce:32:0a:df:17:cd:ab:54:94:a7:0a:e8:b5:f2:
2e:77:8c:36:5a:4a:59:43:61:15:e8:31:38:50:b8:3d:8b:f9:
5d:5a:63:fc:1d:4b:0c:33:d0:23:56:83:39:34:a7:10:12:de:
f7:fe:b8:13:31:d8:9e:14:5c:4f:10:3b:4d:63:75:02:c1:8a:
01:db:77:a0:46:5f:d0:35:5c:b8:c4:40:b1:84:12:fe:50:0c:
da:29:bd:a0:dc:58:7c:11:64:3e:cb:8f:ad:4e:62:4d:00:d3:
ce:3b:0a:e2:df:90:10:85:e8:42:6d:e5:03:3a:b0:36:f6:51:
f7:94:cf:8a:b8:c2:40:f4:d9:b2:03:8a:c4:1c:fc:5a:53:dd:
91:03:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:55 2025 by rpki-client